← Back

Online Shopping Alphaware

online_shopping_alphaware

Vendor: Online Shopping Alphaware Project • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2020-25362
1Online Shopping Alphaware Project
1Online Shopping Alphaware
Jun 17, 2026
Jun 2, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The id paramater in Online Shopping Alphaware 1.0 has been discovered to be vulnerable to an Error-Based blind SQL injection in the /alphaware/details.php path. This allows an attacker to retrieve all databases.
CVE-2020-24208
1Online Shopping Alphaware Project
1Online Shopping Alphaware
Jun 17, 2026
Aug 17, 2020
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
A SQL injection vulnerability in SourceCodester Online Shopping Alphaware 1.0 allows remote unauthenticated attackers to bypass the authentication process via email and password parameters.